Allowed sinks.
We collect the sink method signatures from [1]}, [2]} (excluding methods of Android specific packages) and exclude the allowed sinks.
The allowed sinks are maintained for each confidential asset.
These are method implementations mapped to SecDFD elements where the confidential asset exits the system (i.e., external entities and data stores).
For example, the secret flowing into the Plugin (data flow 10 in Fig. REF ) is expected to flow there.
Therefore, we consider the Plugin as an allowed sink.
However, since the Plugin can not be mapped to the implementation, we instead consider the method implementations mapped to the Decrypt data process as allowed sinks.
